2026-05-19 归档

今日共收录 917 条安全情报,包含 132 个 CVE,384 篇安全通告,以及 107 篇研究论文。

← 返回归档列表
威胁情报2026-05-19 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-19 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-19 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Google Cloud Consulting

Google Cloud Consulting

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Transform with Google Cloud

Transform with Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Google Cloud Products

Google Cloud Products

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-19 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-19 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-19 发布INFO

Next-Gen Identity Security

Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-19 发布INFO

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-18 发布INFO

Developer Workstations Are Now Part of the Software Supply Chain

Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the ac

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-18 发布INFO

How Storm-2949 turned a compromised identity into a cloud-wide breach

Storm-2949 turned stolen credentials into a cloud-wide breach, moving from identity compromise to large-scale data theft

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-18 发布INFO

5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

Many employees already use shadow AI tools at work without security review. Adaptive Security breaks down how teams can

历史摘要 · 未重新核验 · BleepingComputer

学术论文2026-05-19 发布MEDIUM

MirageFlow: A New Bandwidth Inflation Attack on Tor.

本文提出一种针对Tor网络的新型带宽膨胀攻击MirageFlow,旨在通过欺骗带宽测量机制,使攻击者控制的恶意中继节点获得更高的带宽权重,从而吸引更多用户流量,为后续去匿名化攻击创造条件。Tor网络当前日均用户约200万,是最大匿名通信系统

历史摘要 · 未重新核验 · NDSS

学术论文2026-05-19 发布MEDIUM

From Virtual Touch to Tesla Command: Unlocking Unauthenticated Control Chains From Smart Glasses for Vehicle Takeover.

本论文研究了可穿戴设备与自动化控制系统交叉领域的安全漏洞,特别聚焦于以智能眼镜为入口点,揭示在未经用户验证或交互的情况下接管安全关键自动化控制链的威胁。作者发现,当安全机制仅依赖入口点安全且对先前节点完全信任时(例如自动化控制链中的 App

历史摘要 · 未重新核验 · IEEE S&P